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Client generates a resource- request directed to 
the server 



V oz. — O Resource manager receives the resource-request and determines 
resource name and authorization level 



^ ° !> U \ Resource manager translates a resource request to a resource- 
inauirv-reauest 
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^ °H I the authorization service 
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access control list 
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Authorization service returns success 



Resource manager performs request 
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Search extends to include parent 
node with ACL inherited at 
sufficiently high authorization level 
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No such parent node 


Authorization service returns failure 
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Resource manager denies request 
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Authorization-Credentials = "Dad" 



Resource-Operation = "Set Modem Configuration" 



FIG. 4 
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Resource-Name = "Key3/User-config" 



Authorization-Level = "Owner" 



Authorization-Credentials = "Dad" 



FIG. 5 



